Trust

Security

How PickYour.App isolates your apps, protects transport and access, and how to report a vulnerability.

Updated 2026-10-23PickYour.App
01

One app, one server

Every install gets its own dedicated cloud instance. No noisy neighbours sharing your kernel — your app's CPU, RAM and disk are yours alone.

02

Encrypted transport

Connect a domain and we issue SSL automatically — HTTPS on every provisioned app, renewed for you. Free *.pickyour.app subdomains are HTTPS-ready the same way.

03

Access control

  • SSH keys — key-based access to your instances, from the security guide in the docs.
  • Two-factor authentication — available on your account (Account → security).
  • Sessions — see and revoke active sign-in sessions any time.
  • Team roles — invite teammates with scoped access instead of sharing credentials.
04

Payments

Billing runs through PayPal. Full card numbers and CVCs never reach our servers — we only keep brand and last-four digits as display metadata on your billing page.

05

Platform hygiene

  • Admin actions on the platform are written to an audit log.
  • Customer support access to an instance requires your explicit request in a ticket.
  • We don't run analytics trackers inside your dashboard.
06

Report a vulnerability

Found a problem in the platform itself? Email [email protected] or use the contact form and mark it as a security report. For abuse of another customer's app, use Report abuse instead.